CVE-2026-8599 MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field

The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes...

1Panel cross-site scripting vulnerabilities

1Panel is an open-source Linux server operation and management panel developed by the 1Panel community. Versions of 1Panel prior to 1.10.33-lts, as well as versions 2.0.16 and earlier, have a cross-site scripting vulnerability. This vulnerability stems from insufficient content cleaning when the...